Security & Compliance Leader for Fast-Growth Tech

Speedrun Talent Network; Santa Monica (CA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Unlimited PTO

401(k) plan

Health insurance

Paid company holidays

Competitive salary

Job summary

favorited in Santa Monica is seeking an IT, Security & Compliance Manager to own and build the systems, processes, and programs that keep the company secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, risk management, and vendor management. You’ll partner with executives, engineering, and partners to implement controls and security practices as the company scales, defining which certifications to pursue and building a roadmap accordingly.

Qualifications

• 5+ years of experience across IT, information security, GRC, compliance, or a related field.
• Experience owning or contributing to IT and security programs within a startup or high-growth technology company.
• Strong understanding of security frameworks, controls, risk management, and compliance requirements.
• Experience building security and compliance programs from the ground up.
• Familiarity with SOC 2, ISO 27001, GDPR, CCPA/CPRA, and related security/privacy frameworks.
• Experience managing security audits and certification processes.
• Strong experience with identity and access management, SaaS administration, endpoint security, and IT operations.
• Experience evaluating and managing IT and security vendors.
• Ability to assess company needs and determine appropriate certifications and standards.
• Strong organizational and project management skills.
• Excellent communication with technical and non-technical teams.
• Independent工作 and scalable security processes.

Responsibilities

• Own day-to-day IT operations, including systems, applications, access management, devices, identity, and employee technology.
• Develop and maintain favorited’s information security program, policies, standards, and controls.
• Own security and compliance readiness, including selecting appropriate certifications and frameworks for the business.
• Develop and manage a roadmap for certifications like SOC 2, ISO 27001, based on business needs.
• Partner with engineering and infra teams to ensure security controls and monitoring are in place.
• Manage identity and access management including onboarding, offboarding, and access reviews.
• Establish and maintain security policies covering access control, data protection, incident response, and vendor risk.
• Coordinate security audits, assessments, penetration tests, and compliance reviews.
• Develop and maintain incident response and security escalation processes.
• Manage security vendors and third-party risk management.
• Collaborate with legal, finance, HR, and leadership on privacy and risk initiatives.
• Maintain documentation required for security programs and evidence for audits.
• Educate employees on security best practices and compliance requirements.
• Help establish scalable IT and security processes as the company grows.

Skills

IT operations

Information security

GRC / compliance

Risk management

Vendor management

Identity & access mgmt

SOC 2

ISO 27001

GDPR

CCPA/CPRA

Security audits

Cloud security (AWS)

Cloud security (GCP)

Privacy

Tools

AWS

GCP

SIEM

Endpoint management

Job description

favorited in Santa Monica is seeking an IT, Security & Compliance Manager to own and build the systems, processes, and programs that keep the company secure, compliant, and operationally efficient.

This hands-on role spans IT operations, information security, risk management, and vendor management. You’ll partner with executives, engineering, and partners to implement controls and security practices as the company scales, defining which certifications to pursue and building a roadmap accordingly.